- play_arrow Overview
- play_arrow Services Overview
- play_arrow Services Configuration Overview
-
- play_arrow Network Address Translation
- play_arrow NAT Overview
- play_arrow Stateful NAT64
- play_arrow Static Source NAT
- play_arrow Static Destination NAT
- play_arrow Network Address Port Translation
- play_arrow Deterministic NAT
- play_arrow NAT Protocol Translation
- play_arrow IPv4 Connectivity Across IPv6-Only Network Using 464XLAT
- play_arrow Port Control Protocol
- play_arrow Secured Port Block Allocation
- play_arrow Port Forwarding
- play_arrow Dynamic Address-Only Source Translation
- play_arrow Inline NAT
- play_arrow Stateless Source Network Prefix Translation for IPv6
- play_arrow Monitoring NAT
- play_arrow Packet Translation and GRE Tunneling
-
- play_arrow Transitioning to IPv6 Using MAP-E and MAP-T
- play_arrow Transitioning to IPv6 Using MAP-E and MAP-T
- Mapping of Address and Port with Translation (MAP-T)
-
- play_arrow ALGs
- play_arrow ALGs
-
- play_arrow Access Security
- play_arrow Stateful Firewalls
- play_arrow IDS on MS-DPC
- play_arrow Network Attack Protection on MS-MPC and MS-MIC
-
- play_arrow IPsec Tunnels
- play_arrow IPsec Overview
- play_arrow Inline IPsec
- play_arrow IPsec Tunnels With Static Endpoints
- play_arrow IPsec Tunnels With Dynamic Endpoints
-
- play_arrow CoS on Services Cards
- play_arrow CoS on Services Cards
- play_arrow Class of Service on Link Services Interfaces
-
- play_arrow Inter-Chassis Redundancy for NAT and Stateful Firewall Flows
- play_arrow Configuring Inter-Chassis MS-MPC and MS-MIC for NAT and Stateful Firewall (Release 16.1 and later)
- play_arrow Configuring Inter-Chassis Stateful Synchronization for NAT and Stateful Firewall (Release 15.1 and earlier)
-
- play_arrow Multilinks
- play_arrow Link Services Interface Redundancy
- play_arrow Link Bundling
-
- play_arrow Traffic Load Balancer
- play_arrow Traffic Load Balancer
-
- play_arrow Services Card Redundancy
- play_arrow Services Card Redundancy for MS-MPC and MS-MIC
- play_arrow Services Card Redundancy for Multiservices PIC
-
- play_arrow Voice Services
- play_arrow Voice Services
-
- play_arrow Layer 2 PPP Tunnels
- play_arrow Layer 2 Tunneling of PPP Packets
-
- play_arrow URL Filtering
- play_arrow URL Filtering
-
- play_arrow Configuration Statements and Operational Commands
Monitoring and Troubleshooting Softwires
Ping and Traceroute for DS-Lite
With Junos OS Release 11.4, you can use the ping and traceroute commands to determine the status of the DS-Lite
softwire tunnels:
IPv6 ping—The softwire address endpoint on the DS-Lite softwire terminator (AFTR) is usually configured only at the
[edit services softwire]hierarchy level; it need not be hosted on any interface. Previous releases of the Junos OS software did not provide replies to pings to the IPv6 softwire address when the AFTR was not configured on a specific interface or loopback. An IPv6 ping enables the softwire initiator (B4) to verify the softwire address of the AFTR before creating a tunnel.IPv4 ping—A special IPv4 address, 192.0.0.1, is reserved for the AFTR. Previous releases of the Junos OS did not respond to any pings sent to this address. A B4 and other IPv4 nodes can now ping to this address to determine whether the DS-Lite tunnel is working.
Traceroute—The AFTR now generates and forwards traceroute packets over the DS-Lite tunnel.
No additional CLI configuration is necessary to use the new functionality.
Monitoring Softwire Statistics
Purpose
You can review softwire global statistics by using
the show services softwire or show services softwire
statistics command.
Action
user@host# show services softwire Interface: sp-0/0/0, Service set: sset Softwire Direction Flow count 2001:0:0:1::1 -> 1001::1 I 3
user@host# show services softwire statistics DS-Lite Statistics: Service PIC Name: :sp-0/0/0 Statistics ---------- Softwires Created :2 Softwires Deleted :1 Softwires Flows Created :2 Softwires Flows Deleted :1 Slow Path Packets Processed :2 Fast Path Packets Processed :274240 Fast Path Packets Encapsulated :583337 Rule Match Failed :0 Rule Match Succeeded :2 IPv6 Packets Fragmented :0 Transient Errors ---------------- Flow Creation Failed - Retry :0 Slow Path Failed - Retry :0 Errors ------ Softwire Creation Failed :0 Flow Creation Failed :0 Slow Path Failed :0 Packet not IPv4-in-IPv6 :0 IPv6 Fragmentation Error :0 Slow Path Failed - IPv6 Next Header Offset :0 Decapsulated Packet not IPv4 :0 Fast Path Failed - IPv6 Next Header Offset :0 No Softwire ID :0 No Flow Extension :0 Flow Limit Exceeded :0 6rd Statistics: Service PIC Name :sp-0/0/0 Statistics ---------- Softwires Created :0 Softwires Deleted :0 Softwires Flows Created :0 Softwires Flows Deleted :0 Slow Path Packets Processed :0 Fast Path Packets Processed :0 Fast Path Packets Encapsulated :0 Rule Match Failed :0 Rule Match Succeeded :0 Transient Errors ---------------- Flow Creation Failed - Retry :0 Slow Path Failed - Retry :0 Errors ------ Softwire Creation Failed :0 Flow Creation Failed :0 Slow Path Failed :0 Packet not IPv6-in-IPv4 :0 Slow Path Failed - IPv6 Next Header Offset :0 Decapsulated Packet not IPv6 :0 Encapsulation Failed - No packet memory :0 No Softwire ID :0 No Flow Extension :0 ICMPv4 Dropped Packets :0
Monitoring CGN, Stateful Firewall, and Softwire Flows
Purpose
Use the following commands to check the creation of the softwires, pre-NAT flows, and post-NAT flows. Output can be filtered using more specific fields such as AFTR or B4 address or both for DS-Lite, and softwire-concentrator or softwire-initiator or both for 6rd.
show services stateful-firewall flows
show services softwire flows
Action
user@host# show services stateful-firewall flows
Interface: sp-0/1/0, Service set: dslite-svc-set2
Flow State Dir Frm count
TCP 200.200.200.2:80 -> 44.44.44.1:1025 Forward O 219942
NAT dest 44.44.44.1:1025 -> 20.20.1.4:1025
Softwire 2001::2 -> 1001::1
TCP 20.20.1.2:1025 -> 200.200.200.2:80 Forward I 110244
NAT source 20.20.1.2:1025 -> 44.44.44.1:1024
Softwire 2001::2 -> 1001::1
TCP 200.200.200.2:80 -> 44.44.44.1:1024 Forward O 219140
NAT dest 44.44.44.1:1024 -> 20.20.1.2:1025
Softwire 2001::2 -> 1001::1
DS-LITE 2001::2 -> 1001::1 Forward I 988729
TCP 200.200.200.2:80 -> 44.44.44.1:1026 Forward O 218906
NAT dest 44.44.44.1:1026 -> 20.20.1.3:1025
Softwire 2001::2 -> 1001::1
TCP 20.20.1.3:1025 -> 200.200.200.2:80 Forward I 110303
NAT source 20.20.1.3:1025 -> 44.44.44.1:1026
Softwire 2001::2 -> 1001::1
TCP 20.20.1.4:1025 -> 200.200.200.2:80 Forward I 110944
NAT source 20.20.1.4:1025 -> 44.44.44.1:1025
Softwire 2001::2 -> 1001::1
